Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: rNesp7dzCtifjs6J0ogeuK81r8e0OIZQbmkwdKkkcwA=
Subject key identifier: A9:63:BB:8A:08:AD:C5:C8:0D:1D:E3:09:22:AC:1E:6A:5B:E7:99:82
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 0194BD852B181FC554CDFD7A578C7CD23F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0AE8
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: ehIUqsea2LP8QHpkD3hTFpqY42vYn+qZyEhlOcMQZIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:18:1f:c5:54:cd:fd:7a:57:8c:7c:d2:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=a963bb8a08adc5c80d1de30922ac1e6a5be79982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:a5:2b:53:b2:ba:c4:5c:65:17:e5:9c:59:
ec:5e:07:cd:47:4c:d8:ef:74:96:43:49:97:b5:af:
9f:8f:2e:81:01:3f:89:c8:51:f4:77:32:92:0b:9e:
29:68:63:7d:e7:45:4c:04:32:9d:25:4c:e2:04:0c:
d0:d3:c1:bc:8c:11:bc:71:9b:32:08:0b:55:b5:83:
7f:10:19:39:87:0e:ae:fa:d3:4f:48:f1:b4:f4:bb:
b0:ec:fd:b5:12:c1:c9:3f:bd:25:25:6b:42:5c:33:
c6:1f:27:9f:7d:5e:90:ce:0c:30:29:fd:cc:74:cd:
48:62:99:b7:da:af:71:da:66:c4:90:c6:35:4e:e4:
9b:dc:7e:36:bb:a2:f3:83:75:df:58:4f:eb:b2:e2:
0f:f8:a4:38:e3:61:f2:4d:55:52:e2:85:ad:ee:44:
47:58:0f:06:5a:0a:a4:4a:3a:38:a6:7d:0d:64:91:
ed:89:eb:2e:a0:45:10:ed:f1:c7:25:d5:7c:70:7e:
be:06:7f:b0:16:3a:27:2f:28:9c:3e:90:bd:fe:e0:
83:bb:2c:e1:24:02:64:d4:63:33:2c:dd:50:9c:0a:
46:12:22:3e:32:13:c8:79:fd:d8:fc:a1:71:c4:9f:
52:72:5a:34:f9:d8:0e:2b:19:33:02:68:c2:d0:5d:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:BB:8A:08:AD:C5:C8:0D:1D:E3:09:22:AC:1E:6A:5B:E7:99:82
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d1:84:6e:b1:99:26:3b:a0:10:1e:d4:8d:01:65:c6:2e:c1:
34:db:23:07:45:b9:b8:06:c7:ba:45:0c:48:11:ea:6a:ee:6c:
58:7c:94:7d:8d:25:2a:fb:53:2b:9b:44:e4:7a:fd:84:82:ad:
0e:7c:9f:be:f1:29:37:15:b6:a9:b4:5f:e3:ec:30:e1:20:60:
fc:8d:b2:62:83:18:20:f6:bf:49:03:82:fe:15:5e:3d:c2:58:
d4:c9:3e:14:71:d8:6e:c5:12:9e:ce:e8:c8:c6:bb:0c:6a:48:
5f:1e:c6:07:30:a9:54:05:7a:9e:65:78:0f:f5:a2:2f:8d:19:
a8:0d:d2:98:72:08:6f:ab:db:1c:71:7d:de:6a:98:93:0b:56:
3e:50:5f:34:b1:11:37:fe:b6:d9:6d:83:94:be:d3:bc:57:9a:
92:19:ca:26:3c:17:ad:f0:6a:10:02:85:de:3d:ec:5c:99:fc:
6b:43:1b:9e:ac:79:c5:d1:3d:59:2d:8b:f3:47:48:6c:b5:e5:
9a:de:75:c5:60:75:55:39:51:79:71:db:7f:19:b1:21:39:3d:
84:a5:75:eb:f0:58:aa:32:10:c4:2f:06:7c:fd:4b:e6:e3:5e:
24:1c:ec:4e:1a:9a:fc:e2:8e:29:2c:d0:a4:c2:fd:77:92:1c:
08:c7:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:01 2025 by rpki-client